Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
File: 359a9122-fd59-4d98-8cb4-b8f026add67b.roa (raw, json)
Hash identifier: HMchGuE1hoP4Tl9mdk70uUAn5KiB4HN1Tute34W/OaM=
Subject key identifier: CD:B2:A6:4C:D3:E8:4E:86:CA:65:BF:66:9E:07:C5:A1:C4:16:54:89
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7E512F5F75ECC4066F0B57BB3739B78BADD24F8C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
Signing time: Thu 18 Jun 2026 20:19:35 +0000
ROA not before: Thu 18 Jun 2026 20:19:35 +0000
ROA not after: Wed 16 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:51:2f:5f:75:ec:c4:06:6f:0b:57:bb:37:39:b7:8b:ad:d2:4f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jun 18 20:19:35 2026 GMT
Not After : Sep 16 23:59:59 2026 GMT
Subject: serialNumber=39535b818999b1bf14369a863049c71b1b13dec7575a1e36573c7f2af777102a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:4a:5c:26:a9:9e:ea:0e:4f:e7:3b:42:6b:
45:e9:af:b4:0f:66:6f:02:e3:4f:21:da:b9:cc:9f:
e0:6c:90:b9:97:8f:40:54:cf:bf:bd:28:4b:4b:d8:
04:44:e8:f3:1a:16:46:9d:27:87:e5:64:5d:fb:48:
bd:66:f0:0d:d6:c7:52:a0:14:d8:6e:ea:1d:4b:c9:
b7:32:42:c0:25:a3:8c:f6:42:74:e5:15:72:29:ad:
c0:45:5b:7a:dd:c8:da:2f:75:5c:38:3d:2d:0d:57:
8a:11:8b:d1:65:4b:5a:ce:4b:d9:f3:2e:f1:94:48:
50:2b:4f:64:b2:99:0e:b0:c4:4b:a7:79:73:28:bf:
80:d5:3c:d9:85:57:36:d8:ff:0c:f5:78:ab:62:e3:
40:a8:64:7c:af:d0:0b:9b:28:cc:9d:30:b7:ba:f4:
1d:cc:39:e6:7a:e5:ce:c3:83:76:25:97:48:3b:a2:
f4:b7:3f:fc:5f:e2:a5:c3:b3:cb:b3:23:a7:13:7b:
16:db:65:a4:8b:08:bd:6e:d8:8f:e8:60:ac:cf:4c:
da:33:c0:0a:2e:ae:2f:62:91:a6:ab:9c:9f:66:3a:
1f:b8:42:3a:c3:61:33:61:18:bb:0e:fc:c2:7e:ad:
e4:05:97:14:0b:e3:b1:f6:e1:41:a0:14:77:5e:d4:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:A6:4C:D3:E8:4E:86:CA:65:BF:66:9E:07:C5:A1:C4:16:54:89
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f480::/48
Signature Algorithm: sha256WithRSAEncryption
0f:d4:7f:f9:55:6f:03:cf:28:2a:7b:b3:6e:f7:c6:7b:a1:e3:
91:ae:93:65:f5:0e:51:52:29:e7:4c:d2:53:d6:64:8b:aa:54:
33:d1:41:9f:23:65:37:ef:be:60:d8:6a:16:e5:91:e8:c0:9d:
fc:c4:76:5c:35:04:bb:c2:9d:44:0a:44:70:e3:8a:3f:ec:a2:
21:50:e9:ba:ca:43:ef:e5:42:46:6d:b9:7a:2a:ce:65:50:97:
94:3f:50:c6:bf:0f:5f:3e:51:83:d6:4b:5b:64:21:34:be:93:
e4:3c:e9:cc:ac:d8:9e:75:e6:56:dc:4c:ac:1e:27:c6:96:85:
4b:81:b2:94:00:c9:ec:9d:ce:eb:d5:e7:a7:d3:45:46:fc:f0:
d3:3b:4b:62:3f:ae:7f:6e:ee:53:de:d8:86:52:5b:ac:92:d7:
06:3f:28:d8:d7:5b:dc:c9:b2:c6:a2:18:29:8c:e2:bf:86:0d:
e9:dd:92:6f:d0:54:52:8a:45:f5:26:c9:bc:6c:2f:9d:74:b3:
27:24:aa:6a:51:da:43:c2:4e:e2:09:0f:4d:26:c2:88:44:bd:
c7:44:28:25:f5:b8:6f:9d:6c:d7:fe:67:15:7b:a5:05:d6:e9:
e8:ed:66:1c:e4:6e:10:39:34:4b:27:4a:28:d0:0c:e0:f7:18:
d5:ea:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:37 2026 by rpki-client